Hi, for any reason may saml account is removed from local Administrators group from Password Safe Cloud. Is there any reason
Solved
SAML Account removed from Administrator
Best answer by Prudhvi Keertipati
If you are managing access from AD groups, then disabling the Group Resync doesn’t have any impact on AD group access controls, they function as usual.
Group Resync option applies only to local groups.
+3
Configuration → Authentication Management → Authentication Options.
Oh nice. So in this case I should keep this option unchecked, right? Does it interfere in any other SAML process?
If I understood correctly, if I disable it the groups assigned to users will not be removed, even they are removed from AD. It can cause inconsistences in my access.
+3If you want your users not be removed from local groups then you should disable the group resync.
Are you controlling the group assignment from SAML as well?
I am controlling only one SAML group. Which contains ALL password safe users. The access inside Password Safe is controlled by AD - which is replicated to PS in a daily bases.
+3If you are managing access from AD groups, then disabling the Group Resync doesn’t have any impact on AD group access controls, they function as usual.
Group Resync option applies only to local groups.
Login to the community
No account yet? Create an account
Login with the BeyondTrust Identity Service
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.